MAL-2025-188901 Malicious code in protractor-nightwatch-schema-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea7a915975cb4548934f89ccf75e0bc82f99378036e167a09ab41fcb1cf23afd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in multiverse-perseus-ignite-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e2dc25fda56b320b22f7aaa8af3bf5680fb5d97128cb6cfe22f2435a8dfc067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187350 Malicious code in hexo-boson-charon-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56cd66ea725cf1761fe3250a133dfda961733f0870f716905609eae11f5f91d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187241 Malicious code in grus-crust-greatfilter-holography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a838db28e4304c090d7abff45df6991037bf045cae83f8cec95623bbcf772a9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185456 Malicious code in andromeda-impulse-quasarjet-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e410a4fcb58b2811102f923002858586bc7bc659b7f0faf932ba2c0a1456af4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187053 Malicious code in frontend-uninstall-foundation-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689a30b58745647f6d8ae54285da6f284047816f0b89c8c04d4a4e632d5b81e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-helmet-terser-webpack-plugin-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33dbdfc3aeaf126c1ce24cb78ecb3e956771efcf6d0cb9a2a8be189ba3b1c57c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188017 Malicious code in meteor-cli-nightwatch-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4ae5ae48dc55180eb76cf505e37d133d5e836a3f4246eaf1b4fdf5e063f5a2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187708 Malicious code in kronos-phoebe-kronos-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc25b80229005403d5a869b7a5ab665719bb0043973fc6000c8f42696c5c624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185685 Malicious code in avior-ganymede-backend-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a4711152c4083ccdb19747bdc390909e2dd6d6c64e5f7d82894ecc60e1fad7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185864 Malicious code in blueshift-lynx-dotenv-safe-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dab58c5139fe550ec62331ad682959b01530abab6c25ee42eabc08fb386d1f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187868 Malicious code in loop-webdriverio-vulcan-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f9d3f3f64e3dcfb01546c14df5e1d0e289308f7238bf5fb36f487b9e92423e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upsilon-socket-cluster-static-eta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c4127e8b9df2359bf4f313e20808bc22f8a6248af19bb410a6350869034d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189851 Malicious code in tectonophysics-transform-crust-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 362c7a3c2a387c1b0b23c2ad16e0ff6e12215ac224b7fe3f752d831110cf1fcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187502 Malicious code in integer-optimize-alpha-byte-authenticate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3cc0597617c50b1abbdb88a4a1f29177a51dd4efc9e1e4472762f2d4125f247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187951 Malicious code in mdx-coronalmassejection-tardigrade-paleobotany (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 492b299ded7916b85e77ebb5ca4a8466e7e4e23589a665e40592fcb3cbcd626b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185618 Malicious code in async-eta-try-balance-java (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16ce88a7db07011ebd02f6deb6abe9ec27e30f28d503c3580ab35c829a94c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-pipe-websockets-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e908ab5a9f1588062bc9ccd9e3447dc656308f6a5f76ad9232116d8165cebad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-halley-ophiuchus-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f06c6744631b77adfa679368aa5b79b0679290514f0027616c347fd5f572ea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188109 Malicious code in mongodb-nodemon-callback-areology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 215ca53b952a9cf0e27dea22bbc2f071c70f3f2c8738b83de3625f453dec9925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...